Privacy Policy

Last updated: April 21, 2026

PadelPuntos ("we", "our", "the app") is built for tracking padel matches and Elo ratings within private friend groups. This policy explains what data we collect, how we use it, who we share it with, and your rights.

If you have questions, email ayazvural@gmail.com.

Data We Collect

Account information

• Email address — used to create your account, sign you in, and send password reset links.
• Display name — the name your friends see in groups and on leaderboards.
• Profile photo (optional) — if you choose to upload an avatar.
• User ID — an internal identifier that links your data together.

App activity

• Match data — scores, opponents, partners, match dates, and optional court locations you enter.
• Group memberships — which groups you've joined and invited others to.
• Elo ratings — calculated from your matches.

Subscription information

• Purchase status — whether you have an active PadelPuntos Premium subscription.
• We never see your payment details. Apple processes all payments through their App Store; PadelPuntos only receives subscription status confirmations.

Push notification data

• Device push token — stored so we can send match notifications to your device when a friend logs a match that includes you. You can disable notifications in your device settings at any time.

What We Don't Collect

• We do not collect your location (precise or coarse).
• We do not collect contacts, calendar, health, or fitness data.
• We do not collect browsing history, advertising identifiers, or cross-app tracking data.
• We do not run analytics SDKs that track your screens, taps, or scrolls.
• We do not show ads, and we do not sell or share your data with advertisers or data brokers.

How We Use Your Data

Every piece of data we collect is used solely to make the app work:

• Your email authenticates you.
• Your matches show up in your group's history and leaderboard.
• Your Elo rating updates when you log a match.
• Your subscription status unlocks premium features.
• Your push token delivers match notifications.

Third-Party Services

We use a small set of trusted services to operate PadelPuntos. Each only receives the data it needs:

• Supabase — hosts our database, authentication, and image storage. All your account and match data lives here.
• RevenueCat — manages subscription status. Receives your user ID and Apple's confirmation that you have an active subscription.
• Apple — processes all In-App Purchases and delivers push notifications. Apple's own privacy policy applies to payments.
• Expo — relays push notifications from our backend to Apple. Receives device push tokens.

None of these services use your data for advertising or tracking.

Data Retention

• While your account is active, we retain your data to keep the app working.
• When you delete your account (Settings → Delete Account), we permanently delete your profile, matches, group memberships, and push token within 30 days.
• Matches that involved you as a partner or opponent remain visible to other players in shared groups, but your name is anonymized after deletion.
• Apple retains payment records per their own requirements, which we cannot modify.

Your Rights

Regardless of where you live, you can:

• Access your data — everything is visible in the app.
• Correct your data — edit your profile anytime in Settings.
• Export your data — email us and we'll send a JSON export.
• Delete your account — Settings → Delete Account. This removes all your personal data.

If you are in the EU (GDPR), UK, or California (CCPA), you additionally have the right to lodge a complaint with your local data protection authority. Your legal basis for our processing is either consent (account creation, optional profile photo) or legitimate interest (running the app you signed up for).

Children's Privacy

PadelPuntos is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has created an account, contact us and we will delete the account.

Data Security

All data is encrypted in transit (HTTPS/TLS) and at rest (managed by Supabase and Apple). We use industry-standard access controls so only the app backend can access your data. If we discover a breach that affects you, we will notify you by email within 72 hours.

Changes to This Policy

If we materially change what data we collect or how we use it, we will notify you by email and post a notice inside the app. Minor wording updates will be noted here with a new "last updated" date.

Contact

Questions, data requests, or privacy concerns:
ayazvural@gmail.com